No pid... Not sure on that one. Maybe your OS build or something. "Man tcpdump". This should get you started:
"Tcpdump -nn -vvv -s 1500 port 2055". (Where 2055 is YOUR netflow port). What version of ntop? If not at least 4.0.1, upgrade. From: azadeh hashemi [mailto:[email protected]] Sent: Tuesday, August 23, 2011 04:06 AM To: Gary Gatten; [email protected]'" <[email protected]> Subject: Re: [Ntop] nTop does not show any netflow in addition I don't know how to use tcpdump :"> ________________________________ From: azadeh hashemi <[email protected]> To: Gary Gatten <[email protected]>; "[email protected]'"" <[email protected]> Sent: Tuesday, August 23, 2011 1:34 PM Subject: Re: [Ntop] nTop does not show any netflow the output of netstat -anp | grep 2055 was: udp 0 0 0.0.0.0:2055 0.0.0.0:* - there is no pid!! ________________________________ From: Gary Gatten <[email protected]> To: "'[email protected]'" <[email protected]>; "'[email protected]'" <[email protected]> Sent: Tuesday, August 23, 2011 1:15 PM Subject: Re: [Ntop] nTop does not show any netflow Run tcpdump and ensure the flows are making it to your ntop host. If so, run "netstat -anp" and ensure there is is something listening on "your" netflow port: 2055, 2056, etc. Then compare the pid listed to that of ntop and ensure they are the same. Lastly you MUST "Admin" -> "switch NIC" and choose your netflow NIC. From: azadeh hashemi [mailto:[email protected]] Sent: Tuesday, August 23, 2011 03:21 AM To: [email protected] <[email protected]> Subject: [Ntop] nTop does not show any netflow Hi in order to see the netflows, I configure my cisco router and it perfectly show them (by "show ip cache flow") then I try to configure my netflow plugin in ntop, and did as such instructions say. but now it does not show anything and I don't know what should I do . Sorry I'm a new to these, Help me please... "This email is intended to be reviewed by only the intended recipient and may contain information that is privileged and/or confidential. If you are not the intended recipient, you are hereby notified that any review, use, dissemination, disclosure or copying of this email and its attachments, if any, is strictly prohibited. If you have received this email in error, please immediately notify the sender by return email and delete this email from your system." <font size="1"> <div style='border:none;border-bottom:double windowtext 2.25pt;padding:0in 0in 1.0pt 0in'> </div> "This email is intended to be reviewed by only the intended recipient and may contain information that is privileged and/or confidential. If you are not the intended recipient, you are hereby notified that any review, use, dissemination, disclosure or copying of this email and its attachments, if any, is strictly prohibited. If you have received this email in error, please immediately notify the sender by return email and delete this email from your system." </font>
_______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
